Siemens Scalance Xcm-/xrm-/xch-/xrh-300 Family vulnerabilities

3 CVEs affecting Siemens Scalance Xcm-/xrm-/xch-/xrh-300 Family, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8176, published 2025-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2511, published 2024-04-08. Medium severity, CVSS 5.9. EPSS: 52.4% chance of exploitation in the next 30 days. Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to…
CVE-2024-5535, published 2024-06-27. Critical severity, CVSS 9.1. EPSS: 5.6% chance of exploitation in the next 30 days. Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A…
CVE-2024-8176, published 2025-03-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references,…